protect against upper / lowecase issue with usernames